Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.mft
File:                     kynvweNfxxNfhY9U0-_lTfrEfl4.mft (raw, json)
Hash identifier:          QSydcbQXOpHvJl7OAHhy7keXNBBkZDlJuLf9uv6U8ZQ=
Subject key identifier:   ED:80:F7:9F:90:B6:0F:FE:67:65:E2:0F:2F:75:51:BB:0E:A8:2A:1D
Authority key identifier: 93:29:EF:C1:E3:5F:C7:13:5F:85:8F:54:D3:EF:E5:4D:FA:C4:7E:5E
Certificate issuer:       /CN=9329EFC1E35FC7135F858F54D3EFE54DFAC47E5E
Certificate serial:       0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kynvweNfxxNfhY9U0-_lTfrEfl4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.mft
Manifest number:          0400
Signing time:             Sat 26 Apr 2025 15:34:13 +0000
Manifest this update:     Sat 26 Apr 2025 15:34:13 +0000
Manifest next update:     Sun 11 May 2025 15:34:13 +0000
Files and hashes:         1: kynvweNfxxNfhY9U0-_lTfrEfl4.crl (hash: 3tTKMZ/Gf+HktZMSqDjFIIpeMBgp5UutCDQE2DOKY8s=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kynvweNfxxNfhY9U0-_lTfrEfl4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9329EFC1E35FC7135F858F54D3EFE54DFAC47E5E
        Validity
            Not Before: Apr 15 01:32:26 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED80F79F90B60FFE6765E20F2F7551BB0EA82A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:e2:d5:bc:bc:91:8e:c9:f9:7e:6b:23:a1:
                    61:bb:b1:fe:2d:7f:71:81:37:fa:db:24:c2:93:33:
                    ef:31:ad:b8:6d:1c:df:3f:1b:e1:1c:c1:0a:11:23:
                    37:2a:c7:5e:7b:35:77:c1:a4:72:bf:42:e6:1d:2b:
                    34:ec:f3:2b:9b:2b:96:fa:33:b0:b9:a9:19:c4:f7:
                    4d:e6:1c:f7:1f:75:3e:97:6a:7d:80:eb:5f:d1:fa:
                    1b:a2:58:6a:cd:e8:ba:e0:44:8c:4b:09:93:21:21:
                    8d:f1:17:4d:fc:49:80:d2:09:cd:b0:8e:30:bd:19:
                    30:f4:a9:c6:32:96:76:98:2c:96:79:75:16:76:5a:
                    11:fc:63:64:36:69:09:ac:6c:41:4d:77:99:79:fd:
                    ef:d5:77:d5:28:54:5d:d0:b4:35:7c:69:33:9b:b8:
                    75:5d:fa:76:83:2d:19:dd:49:3f:12:5f:cf:b3:1f:
                    6a:6c:51:69:12:a9:e6:08:5d:8a:1b:ba:c5:53:04:
                    2a:ce:ac:73:21:2e:eb:7f:f8:cb:18:23:7f:ad:da:
                    b1:0d:e7:31:d2:fc:e2:d6:84:9b:77:d8:ae:0b:1d:
                    92:ab:92:4e:f3:4d:43:c6:2c:11:14:4c:12:c4:e1:
                    51:5f:30:a3:8d:2b:fd:4e:ad:8c:ab:57:72:fe:d7:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:F7:9F:90:B6:0F:FE:67:65:E2:0F:2F:75:51:BB:0E:A8:2A:1D
            X509v3 Authority Key Identifier:
                keyid:93:29:EF:C1:E3:5F:C7:13:5F:85:8F:54:D3:EF:E5:4D:FA:C4:7E:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kynvweNfxxNfhY9U0-_lTfrEfl4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/kynvweNfxxNfhY9U0-_lTfrEfl4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:25:bb:f7:ef:ea:31:0f:5b:50:a2:bc:de:be:4f:5e:ad:
         6e:86:df:48:21:25:34:be:d1:e8:1d:51:11:71:24:05:ac:b2:
         74:8e:6a:c4:11:a6:a9:4c:e1:4b:78:99:32:62:ab:64:20:ce:
         a1:f1:c6:39:02:e0:4f:02:16:be:09:27:fe:0f:75:12:6c:e9:
         05:99:62:f0:3f:66:a5:0f:f2:cf:d3:b8:7a:8b:65:87:2b:5c:
         4a:7f:1a:90:7d:55:93:4b:2d:c9:4d:17:23:e2:ef:60:80:97:
         d6:0e:26:de:43:e0:bf:37:f0:42:f5:88:7a:57:00:41:82:6e:
         ff:d4:49:70:4e:ce:6b:a0:dc:4a:5c:f6:6f:22:c6:b4:0d:a6:
         7f:4f:6e:74:61:8e:4a:56:b4:69:42:ca:62:2c:df:b8:22:73:
         64:49:69:b1:7c:1c:82:06:9b:bf:1e:c0:99:b0:70:38:e6:77:
         5b:d1:27:89:dd:1f:9b:de:12:e4:79:07:74:fe:ae:c6:fa:f1:
         63:fe:80:86:bc:33:4a:40:28:c0:f5:69:f3:a8:db:d2:05:5f:
         ce:46:a3:56:6b:e6:79:22:6c:b2:27:33:39:ef:89:cb:23:b5:
         69:ed:09:2d:5b:49:53:d5:67:a1:17:75:14:29:41:e3:e3:04:
         a7:3f:9a:29
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MzI5
RUZDMUUzNUZDNzEzNUY4NThGNTREM0VGRTU0REZBQzQ3RTVFMB4XDTI1MDQxNTAx
MzIyNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRUQ4MEY3OUY5MEI2MEZG
RTY3NjVFMjBGMkY3NTUxQkIwRUE4MkExRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALeN4tW8vJGOyfl+ayOhYbux/i1/cYE3+tskwpMz7zGtuG0c3z8b
4RzBChEjNyrHXns1d8Gkcr9C5h0rNOzzK5srlvozsLmpGcT3TeYc9x91PpdqfYDr
X9H6G6JYas3ouuBEjEsJkyEhjfEXTfxJgNIJzbCOML0ZMPSpxjKWdpgslnl1FnZa
EfxjZDZpCaxsQU13mXn979V31ShUXdC0NXxpM5u4dV36doMtGd1JPxJfz7MfamxR
aRKp5ghdihu6xVMEKs6scyEu63/4yxgjf63asQ3nMdL84taEm3fYrgsdkquSTvNN
Q8YsERRMEsThUV8wo40r/U6tjKtXcv7XUBMCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBTtgPefkLYP/mdl4g8vdVG7DqgqHTAfBgNVHSMEGDAWgBSTKe/B41/HE1+Fj1TT
7+VN+sR+XjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU4NS9reW52d2VOZnh4TmZoWTlVMC1fbFRmckVmbDQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9reW52d2VOZnh4TmZoWTlVMC1fbFRm
ckVmbDQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTU4NS9reW52d2VOZnh4TmZoWTlVMC1fbFRmckVmbDQubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAX9Ulu/fv6jEPW1CivN6+T16tbobfSCElNL7R6B1REXEkBayydI5qxBGm
qUzhS3iZMmKrZCDOofHGOQLgTwIWvgkn/g91EmzpBZli8D9mpQ/yz9O4eotlhytc
Sn8akH1Vk0styU0XI+LvYICX1g4m3kPgvzfwQvWIelcAQYJu/9RJcE7Oa6DcSlz2
byLGtA2mf09udGGOSla0aULKYizfuCJzZElpsXwcggabvx7AmbBwOOZ3W9Enid0f
m94S5HkHdP6uxvrxY/6AhrwzSkAowPVp86jb0gVfzkajVmvmeSJssiczOe+JyyO1
ae0JLVtJU9VnoRd1FClB4+MEpz+aKQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:12:51 2025 by rpki-client